Losing cryptocurrency is more common than most U.S. investors expect. According to the FBI’s 2024 Internet Crime Report, U.S. citizens filed nearly 150,000 crypto-related complaints in 2024, with investment scams alone accounting for over $5.8 billion in losses. The financial damage is real, and so are the tax implications that follow.
What often catches investors off guard is that the IRS treats different types of crypto losses differently. Under U.S. tax law, losses fall into three categories: casualty losses (lost wallets, wrong addresses), theft losses (hacked accounts, stolen coins), and investment losses (worthless tokens, scam projects, exchange bankruptcies). Not all of them result in a deduction.
This guide covers exactly how the IRS taxes each loss type in 2026, what changed after the Tax Cuts and Jobs Act of 2017, which scam losses qualify for a deduction, how exchange bankruptcies like Celsius and FTX are treated, and which IRS forms to use when filing.
Key Takeaways
- Post-TCJA 2017, most personal casualty and theft losses are no longer deductible
- Lost crypto from forgotten keys or wrong addresses is a non-deductible casualty loss
- Stolen crypto is not a taxable disposal, no capital gains tax is triggered
- Worthless crypto must be disposed of to trigger a capital loss
- Crypto scam losses may qualify as deductible theft losses under IRC § 165 if a profit motive is established
- Most crypto scams do not qualify for the Ponzi scheme safe harbor under Rev. Proc. 2009-20
How Did the Tax Cuts and Jobs Act (TCJA) 2017 Change Crypto Loss Deductions?
The TCJA 2017 is the single most important piece of legislation affecting how crypto losses are treated today. It fundamentally narrowed what U.S. investors can and cannot deduct when cryptocurrency is lost or stolen.
What Changed for Casualty Losses After TCJA?
Before 2018, taxpayers could deduct a broader range of casualty losses on their federal returns. After TCJA took effect, that changed significantly:
- Personal casualty loss deductions are now restricted exclusively to losses arising from federally declared disasters.
- Crypto losses, regardless of how they occurred, do not qualify under this threshold.
- Lost wallets, forgotten passwords, and wrong-address transactions are all non-deductible under current law.
- No capital gain or loss can be claimed on crypto that was simply lost.
What Changed for Theft Losses After TCJA?
Prior to 2018, a taxpayer whose crypto was stolen could potentially claim a deduction under IRC § 165. After TCJA, that pathway narrowed significantly:
- Personal theft losses are no longer deductible for individual investors.
- The only remaining deduction pathway is if the crypto was held as an investment or profit-seeking asset, not a personal one.
- Crypto held purely as a personal asset with no profit intent does not qualify.
How Is Lost Cryptocurrency Taxed in the U.S.?
Losing access to crypto, whether through a forgotten password, a lost private key, or a transaction sent to the wrong address, falls under the casualty loss classification. Under current IRS rules, this is one of the least favorable outcomes for investors.
Is Lost Cryptocurrency Tax Deductible?
No. Under post-TCJA rules, lost cryptocurrency is classified as a casualty loss and is not deductible on your federal tax return. You also cannot report a capital gain or loss on crypto that was simply lost, because no disposal occurred. The asset is treated as still being in your possession for tax purposes, even if you can no longer access it.
What Counts as a Crypto Casualty Loss?
The IRS defines a casualty loss as damage, destruction, or property loss resulting from a sudden, unexpected, or unusual event. In the context of crypto, the following situations fall under this classification:
- Lost Private Keys Or Wallet Passwords: Permanently losing access to a wallet with no recovery option.
- Crypto Sent To An Incorrect Wallet Address: Irreversible transactions sent to the wrong recipient.
- Destroyed Or Lost Hardware Wallets: Physical damage or loss of a device with no seed phrase backup.
- Forgotten Recovery Phrases: No access to the wallet and no way to restore it.
None of these qualify for a deduction under current U.S. tax law. The IRS treats all of the above as non-deductible casualty losses, and no capital gain or loss can be reported since no disposal occurred in any of these scenarios.
Are There Any Exceptions for Lost Crypto?
Yes, but it is extremely narrow. The only scenario where a casualty loss deduction remains available for lost crypto is:
- The crypto must have been lost as a direct result of a federally declared disaster
- The disaster must be officially declared by the President under the Disaster Relief and Emergency Assistance Act
- The loss must be directly attributable to that specific disaster event, not a coincidental loss during the same period
Note: Due to practicality, these exceptions apply to an extremely small number of U.S. investors. Most U.S. investors should treat lost crypto as a non-deductible event with no available tax relief under current law
Example:
Tyler holds 2 ETH in a hardware wallet. He loses the device during a house move and cannot recover his seed phrase. His 2 ETH had a cost basis of $4,000 and a current value of $6,000 at the time of loss.
Tyler cannot claim a casualty loss deduction, nor can he report a capital loss, because no disposal took place. Those 2 ETH remain on his books with no tax relief available.
How Is Stolen Cryptocurrency Taxed in the U.S.?
Stolen crypto falls under the theft loss classification. While the TCJA significantly restricted deductibility, the tax treatment here has one important distinction from casualty losses. Theft is not considered a disposal by the IRS, which means no capital gains tax is triggered on the stolen amount.
Is Stolen Crypto a Taxable Event?
No. The IRS doesn’t treat theft as a disposal, so stolen crypto isn’t subject to capital gains tax, no matter how much it had appreciated. However, the theft itself doesn’t automatically create a deductible loss.
A qualifying theft may still support a separate deduction under 26 U.S. Code § 165 – Losses, depending on how the crypto was held, whether the loss meets the legal definition of theft, and whether recovery seems possible.
Notably, on March 14, 2025, IRS Chief Counsel released memo 202511015, clarifying that more scam victims than previously thought may qualify for this deduction.
Can You Deduct Stolen Crypto as a Theft Loss?
After TCJA, personal theft losses are no longer deductible. However, if the stolen crypto was held as an investment or in a profit-seeking capacity, a deduction may still be available under IRC § 165. The key distinction is whether the crypto was a personal asset or an investment asset at the time it was stolen.
Three Conditions for Deducting Stolen Cryptocurrencies
For a theft loss to be deductible post-TCJA, all three of the following conditions must be satisfied:
- The loss must constitute theft under the applicable state law, covering fraud, larceny, or embezzlement
- The crypto must have been held with a profit motive, as an investment, not a personal asset
- There must be no reasonable prospect of recovery by the end of the tax year in which the loss is claimed
If any one of these conditions is not met, the deduction does not apply.
What Counts as Stolen Cryptocurrency?
The common thread across all stolen crypto scenarios is that a criminal act illegal under state law occurred without the investor’s consent. Common examples include:
- Hacked Wallets: Unauthorized access to a software or hardware wallet resulting in drained funds.
- Hacked Exchange Accounts: A third party gains control of your exchange login and withdraws your holdings.
- Phishing Attacks: Scammer tricks you into revealing credentials or clicking malicious links, leading to unauthorized fund transfers.
- SIM Swapping: Attacker hijacks your phone number to bypass two-factor authentication and access your accounts.
- Malware Attacks: Malicious software installed on your device captures private keys or wallet credentials.
- Unauthorized Smart Contract Exploits: Funds drained from a connected wallet through a malicious or compromised contract.
All of the above involve a criminal act without the investor’s authorization, the defining requirement for a theft loss classification under U.S. tax law.
Example:
Sandra holds 1 BTC in a software wallet as a long-term investment. A phishing attack compromises her wallet credentials, and her BTC, then worth $85,000 with a cost basis of $40,000, is drained.
Sandra does not owe capital gains tax on the stolen BTC.
Because she held the crypto as an investment, reported the theft to local law enforcement and the FBI’s IC3 portal.
If confirmed with no reasonable prospect of recovery by year end, she may qualify for a theft loss deduction under IRC § 165 limited to her $40,000 cost basis.
How Is Worthless Cryptocurrency Taxed in the U.S.?
Worthless crypto occupies a different category from lost or stolen assets. When a token collapses entirely, trading volume gone, project abandoned, the IRS allows investors to recognize a capital loss, but only under specific conditions.
What Makes Cryptocurrency Legally "Worthless"?
A token is considered worthless for tax purposes when it has zero trading volume on any exchange and there is no reasonable expectation of recovering any value from it.
This is distinct from crypto that has simply dropped in price significantly but still trades on a market. A token worth $0.001 with active trading is not worthless, it still has a market value, however small.
How Do You Trigger a Capital Loss on Worthless Crypto?
To claim a capital loss, you must dispose of the asset. There are two practical ways to do this:
Option 1: Sell on an Exchange
- List the token on any exchange where it still has a trading pair
- Sell even for a negligible amount, the proceeds do not need to be significant
- The transaction is automatically recorded and synced if using a connected wallet or exchange
Capital Loss = Cost Basis – Sale Proceed |
Option 2: Send to a Burn Address
- Transfer the token to a verified, unowned third-party burn address
- Record the proceeds as $0 on your tax report
- Ensure the transaction is properly synced with your wallet or exchange for accurate documentation
Capital Loss = Full Cost Basis of the Disposed Asset |
In both cases, the resulting capital loss can be used to offset capital gains from other transactions during the same tax year.
What if the Worthless Crypto Is Illiquid and Cannot Be Disposed Of?
If the token has no trading pairs and cannot be sold or transferred, the tax treatment becomes a gray area. In this scenario, you may attempt a worthless asset deduction by creating a send transaction and documenting $0 proceeds.
However, you must preserve clear evidence that all attempts to dispose of the asset were exhausted and proved impossible. This approach carries a higher audit risk than standard disposals. The IRS may scrutinize these deductions closely, so thorough documentation is essential before proceeding.
Example:
Kevin purchased 50,000 tokens of a DeFi project for $2,000 during its launch. Six months later, the developers abandoned the project, the website went offline, and the token was delisted from all exchanges.
Kevin can no longer sell or transfer the tokens.
He documents his failed disposal attempts and records a send transaction with $0 proceeds, claiming a $2,000 capital loss equal to his original cost basis. He understands this may draw IRS scrutiny and retains all supporting documentation.
How Are Crypto Scam Losses Taxed in the U.S.?
Crypto scams have become one of the most prevalent sources of investor losses, and the IRS addressed the tax treatment directly in Chief Counsel Advice Memorandum CCA 202511015, issued in March 2025. This is the most current guidance available on how scam-related losses are handled under U.S. tax law.
What Does IRS CCA 202511015 Say About Crypto Scam Losses?
The memorandum shares important IRS guidance on when losses from financial scams may qualify as theft losses under IRC §165, including scams involving digital assets when the relevant requirements are satisfied. But it should meet all of the three conditions:
- Condition 1: The loss constitutes theft under state law.
- Condition 2: The crypto was transferred with a profit motive.
- Condition 3: there is no reasonable prospect of recovery by the end of the tax year in which the loss is discovered.
The deduction is capped at your cost basis in the lost crypto. Unrealized gains that were never realized, including promised returns shown on fake platforms, are not deductible.
Which Crypto Scams Qualify for a Theft Loss Deduction?
Here is a table that clearly states the types of crypto scams along with their deduction application:
Scam Type | Deductible? | Reason |
Pig Butchering | Yes | Profit motive established, theft under state law, no recovery |
Phishing/Account Takeover | Yes | Investment funds stolen without authorization, no recovery |
Fake Investment Sites | Yes | Profit motive, funds transferred to fraudulent platform, no recovery |
Rug Pulls | Depends | Theft if intentional fraud is proven; capital loss if project simply failed |
Romance Scams | No | Personal loss, no profit motive established |
Kidnapping/Ransom Scams | No | Personal casualty loss, not profit-motivated |
Giveaway Scams | Likely No | Difficult to prove legitimate investment intent |
When Can You Claim the Deduction: Year of Scam or Year of Discovery?
The deduction is claimed in the tax year the loss is discovered, not the year the scam took place. Discovery is the point at which you become aware of the loss and confirm, through law enforcement, your financial institution, or other formal channels, that there is no reasonable prospect of recovering the funds.
If there is still an active investigation with a realistic chance of recovery at year end, the deduction must wait until recovery becomes clearly unlikely.
What Steps Should You Take After a Crypto Scam?
Taking the right steps after a scam not only helps with potential recovery but directly supports your tax deduction claim under IRC § 165.
Step 1: Report to Local Law Enforcement
- File a police report with your local law enforcement agency as soon as the scam is discovered
- Request a copy of the report and retain the reference number, this serves as formal evidence of the theft
Step 2: File a Complaint With the FBI's IC3
- Submit a detailed complaint at the FBI’s Internet Crime Complaint Center at ic3.gov
- Keep a copy of the submission confirmation and any response received
Step 3: Notify Relevant Crypto Platforms
- Report the incident to any exchange, wallet provider, or DeFi platform involved
- Request a formal acknowledgment of the report from the platform
Step 4: Document Everything
- Record the exact amount of crypto lost and its FMV at the time of the scam
- Save wallet addresses, transaction hashes, platform names, and all communications with the scammer
Step 5: Preserve Law Enforcement Responses
- Retain all responses received from law enforcement, particularly any written confirmation that recovery is unlikely
- This directly satisfies the “no reasonable prospect of recovery“ condition required for the theft loss deduction
What Is the Ponzi Scheme Safe Harbor for Crypto Losses?
Rev. Proc. 2009-20 created a simplified pathway for investors who suffered losses in qualifying Ponzi schemes to claim a deduction without going through the full IRC § 165 analysis. However, its application to crypto is extremely narrow.
What Does Rev. Proc. 2009-20 Allow?
Established in response to the Bernie Madoff scandal, this safe harbor allows taxpayers who suffered losses in a qualifying fraudulent arrangement to deduct either 95% of their qualified loss if no recovery is being pursued, or 75% if recovery from third parties is actively sought. It simplifies the documentation requirements compared to a standard IRC § 165 theft loss claim.
What Are the Three Conditions to Qualify?
To use the Ponzi scheme safe harbor under Rev. Proc. 2009-20, all three of the following conditions must be satisfied:
- True Ponzi Scheme Structure: The arrangement must involve funds from new investors being used to pay fake returns to earlier investors. A scam that simply steals funds outright does not meet this structural requirement.
- Lead Figure Criminally Charged: A primary figure behind the scheme must have been formally charged through a criminal indictment or complaint at either the state or federal level. Suspicion alone or an ongoing investigation without charges does not satisfy this condition.
- Qualified Loss Tied to the Arrangement: The loss must be a qualified loss directly and specifically connected to that fraudulent arrangement. Losses from unrelated transactions or separate scams cannot be bundled into the same claim.
If any one of these three conditions is not met, the safe harbor does not apply and the investor must pursue a standard IRC § 165 theft loss claim instead.
Why Do Most Crypto Scams Not Qualify for the Safe Harbor?
The vast majority of crypto scams fail the safe harbor test on at least two grounds. Scammers are rarely identified and even more rarely criminally charged. Additionally, most crypto scams, including pig butchering and phishing attacks, do not involve the flow of funds between investors that defines a Ponzi structure.
Even the pig butchering scenario analyzed in IRS CCA 202511015 was found not to qualify for the safe harbor, despite involving clear fraud, because no indictment had been filed and there was no investor fund flow.
How Are Exchange Bankruptcies Taxed in the U.S.?
When a major crypto exchange collapses, the tax implications for investors are complex and depend heavily on the specific circumstances of the bankruptcy, what was recovered, and how the IRS ultimately classifies the event.
Case Study 1: Celsius Bankruptcy
When Celsius filed for bankruptcy, investors who had assets on the platform faced uncertainty about whether and how much they would recover. For tax purposes, if a refund was received in kind, meaning the same type of crypto originally held, the cost basis and holding period of the original assets carry over to the refunded amount.
The loss is only realized when the assets are actually disposed of, not at the moment of the bankruptcy filing.
Example:
James originally invested $12,000 in crypto on Celsius. Following the bankruptcy proceedings, he received a refund valued at $7,900.
His realized loss is $4,100, the difference between his original cost basis and the value of the refund received. James reports this as a capital loss on Form 8949 once he disposes of the refunded assets.
Case Study 2: FTX Frozen Assets
The FTX situation is more complex due to the ongoing legal proceedings. Because Sam Bankman-Fried was criminally charged with fraud, FTX investors may have a stronger case for claiming losses under the Ponzi scheme safe harbor in Rev. Proc. 2009-20 than victims of typical crypto scams.
Investors may also choose to treat their frozen assets as worthless, but doing so relinquishes their right to claim those assets if recovered through the bankruptcy process.
Key Steps for FTX Investors:
- File for a tax extension to avoid premature filing before the legal proceedings are resolved
- File a protective claim to preserve the right to a deduction once the situation is fully settled
- Consult a tax professional before treating assets as worthless, given the ongoing recovery process
How to Report Lost, Stolen, or Worthless Crypto on Your U.S. Tax Return?
Reporting crypto losses correctly starts with identifying the right classification and then matching it to the appropriate IRS form. Using the wrong form, or skipping reporting entirely, can create complications at filing time.
Step 1: Identify and Classify Your Loss Type
Before opening any IRS form, determine which category your loss falls into, casualty loss, theft loss, or capital/investment loss. This single decision determines which forms apply and whether any deduction is available at all.
Step 2: Document Everything Before You File
Gather your complete transaction records, including the original acquisition date and cost basis of the lost or stolen crypto, its fair market value at the time of loss, wallet addresses, transaction hashes, and any law enforcement report reference numbers. For scam losses, retain all communications and confirmation that recovery is unlikely.
Step 3: Report Qualifying Theft Losses on Form 4684
Form 4684 is used to report casualty and theft losses. Post-TCJA, only theft losses from profit-motivated transactions qualify for a deduction. Personal theft losses and casualty losses, unless tied to a federally declared disaster, are reported here but yield no deductible amount. Losses claimed under the Ponzi scheme safe harbor in Rev. Proc. 2009-20 are also reported on this form. Attach the completed Form 4684 to your Form 1040.
Step 4: Carry Qualifying Theft Loss Deductions to Schedule A
Qualifying theft loss amounts calculated on Form 4684 are carried over to Schedule A as itemized deductions. This deduction is only available if you choose to itemize rather than take the standard deduction. If your standard deduction exceeds your itemized total, the theft loss deduction provides no additional tax benefit.
Step 5: Report Capital Losses on Form 8949
Every disposal of worthless or scam-related crypto is reported on Form 8949. Enter the acquisition date, cost basis, disposal date, and proceeds, recording $0 if the asset was sent to a burn address. Identify each transaction as short-term (held one year or less) or long-term (held more than one year), as this determines the applicable tax rate.
Step 6: Summarize Capital Losses on Schedule D
Totals from Form 8949 flow into Schedule D, where short-term and long-term results are summarized separately. Net capital losses can offset capital gains from other transactions. If net losses exceed gains, up to $3,000 per year can be applied against ordinary income, with any remaining excess carried forward to future tax years.
Step 7: File an Amended Return if You Missed a Prior Year Loss
If a qualifying theft or capital loss was not reported in the correct tax year, file Form 1040-X to declare the missed amount and correct your prior return. Address the gap as promptly as possible, penalties and interest continue to accumulate on any resulting underpayment the longer it remains unresolved.
How KoinX Helps With Lost, Stolen, or Worthless Crypto Tax Reporting?
Correctly classifying crypto losses, maintaining accurate cost basis records across multiple wallets, and matching each loss to the right IRS form is a process that leaves significant room for error when handled manually. KoinX eliminates that burden by automating the entire workflow, from transaction import to IRS-ready report generation, built specifically for the U.S. market.
Connect 800+ Exchanges, Wallets, and Blockchains in One Place
KoinX integrates with over 800 exchanges, wallets, and DeFi protocols, automatically importing your complete transaction history in one place. Whether your losses occurred on a centralized exchange, a DeFi protocol, or directly through a self-custody wallet, every transaction is captured, timestamped, and accounted for, with no manual data entry required.
Automatically Classify and Track Every Type of Crypto Loss
Once your data is imported, KoinX intelligently tags each transaction, including lost, stolen, or worthless crypto events, and classifies them correctly for tax purposes. Internal transfers between your own wallets are automatically detected and excluded from taxable events, eliminating duplicate entries that could distort your loss calculations.
Maintain Accurate Cost Basis Across All Accounts
Because theft loss deductions and capital losses from worthless crypto are both limited to your original cost basis, accuracy here is non-negotiable. KoinX tracks the cost basis of every asset across all connected platforms using the FIFO accounting method by default, ensuring your loss calculations are always based on verified acquisition data, not estimates.
Generate a Complete IRS-Compliant Tax Report
KoinX generates a Complete Tax Report covering everything U.S. filers need in a single document, capital gains summary, IRS Form 8949 data, other income and expense summary, year beginning and end asset balances, and a full asset-wise profit and loss breakdown, all calculated in USD using your selected accounting method.
File With TurboTax or Hand Off to Your Accountant
KoinX reports are fully compatible with TurboTax, making it simple to import your crypto tax data directly into your return without re-entering figures manually. Alternatively, the reports can be handed directly to a CPA or tax professional, formatted to IRS standards and ready to use without any additional processing.
Crypto loss reporting is one of the most misunderstood and error-prone areas of U.S. tax law. KoinX handles the classification, cost basis tracking, and IRS report generation automatically, so every loss is correctly documented and every form is accurately filed. Get started with KoinX today and head into tax season fully prepared.
Conclusion
The TCJA 2017 fundamentally changed what U.S. crypto investors can and cannot deduct when they lose, have stolen, or hold worthless digital assets. Lost crypto offers no tax relief. Stolen crypto avoids capital gains but only qualifies for a deduction if a profit motive is established. Worthless crypto requires disposal to trigger a capital loss, and scam losses depend entirely on the circumstances and the investor’s intent.
Getting the classification right, and pairing it with the correct IRS forms, is what keeps your filing accurate and your exposure low. KoinX simplifies the entire process, from tracking cost basis to generating IRS-compliant reports, so no loss goes unreported and no form gets filed incorrectly. Sign up on KoinX today and take the guesswork out of crypto loss reporting before the next tax deadline arrives.
Frequently Asked Questions
Can I Deduct Crypto Lost From a Forgotten Private Key?
No. Losing access to crypto through a forgotten private key or seed phrase is classified as a casualty loss under U.S. tax law. Post-TCJA, personal casualty losses are not deductible unless they result from a federally declared disaster, a threshold that crypto losses cannot meet. You also cannot report a capital loss, since no disposal occurred.
Does Reporting a Scam to Law Enforcement Help My Tax Deduction?
Yes, directly. IRS CCA 202511015 assumes that victims took reasonable steps after discovering the scam, including reporting to law enforcement, and received confirmation that recovery was unlikely. Failing to report the scam could undermine the “no reasonable prospect of recovery” condition that is required for the deduction to apply.
What Is the Difference Between a Casualty Loss and a Theft Loss for Crypto?
A casualty loss results from accidental or negligent events, losing a private key, sending crypto to a wrong address, or a hardware failure. A theft loss results from a criminal act, hacking, fraud, or unauthorized access, that is illegal under state law. Post-TCJA, neither is deductible as a personal loss, but theft losses retain a pathway to deductibility if the crypto was held as an investment with a profit motive.
